Roost Privacy Policy

Effective date: June 11, 2026 · Last updated: June 11, 2026

This Privacy Policy explains how TC Fusion LLC ("TC Fusion," "we," "us," or "our") collects, uses, shares, and protects personal data when you use the Roost mobile application and related services (together, the "Service"). It also describes your rights under the EU and UK General Data Protection Regulation ("GDPR") and other applicable laws.

1. Who we are (data controller)

TC Fusion LLC is the controller responsible for your personal data under the GDPR.

• TC Fusion LLC
• 5678 Davis Ford Rd, Manassas, VA 20112, United States
• Privacy contact: privacy@tcfusion.dev

EU / UK representative. Where required under Article 27 of the EU GDPR and UK GDPR, we will appoint a representative in the EU and the UK and list their contact details here. Until then, EU and UK users may contact us at the email above for any matter relating to their personal data.

2. Scope of this policy

This policy applies to the Roost mobile app and the services it connects to. It does not cover third-party services that have their own privacy policies (such as Apple, Google, or your device's operating system), or the TC Fusion company website, which is covered by a separate website privacy policy.

3. The data we collect

We collect the following categories of personal data, mostly directly from you or generated as you use the Service:

Account & identity

• When you sign in with Apple, Google, or an email magic link, we receive an account identifier and your email address. With Apple or Google sign-in, we may receive your first/given name the first time you sign in, which we use to pre-fill your display name.
• A unique account ID we assign to you, used to associate your data across the Service.

Profile & social

• Display name and, if you choose to set one, a profile photo (avatar).
• Your time zone (used to schedule reminders and your sleep window correctly).
• Roost membership: which roost(s) you belong to, the roost name and invite code, who created it, and "kudos" (supportive gestures) sent and received between roost members.

Sleep & progress data

• Derived gameplay metrics: quality bands, Sleep Points (SP), rank and sub-rank state, your hidden baseline (a single number), streak state, and quest completions.
• Per-night numeric summaries (bedtime, wake time, duration, sleep latency, efficiency %, time awake after sleep onset, REM %, deep %, heart-rate dip %) — only if you opt in to summary sync (see Section 4).
• The source of your sleep data (Apple Health, Health Connect, or manual entry).

Device & technical

• A push notification token for your device (so we can send reminders and roost notifications), and your platform (iOS or Android).
• Basic technical identifiers necessary to operate the app and its SDKs.

Subscription & billing

• If you purchase Roost Premium, we receive your subscription status (active/expired, product, renewal date) from our payments processor. We never receive or store your full payment card details — payment is handled entirely by the Apple App Store or Google Play.

Consent records

• An append-only record of the privacy consents you give or withdraw (for example, summary sync), including the consent type, version, and timestamp. We keep this to demonstrate compliance.

Analytics, diagnostics & support

• Behavioral analytics events tied to your account ID (for example, which onboarding step you viewed, or that a paywall was shown). These never contain your sleep values, sleep summaries, or insight contents.
• Crash and error diagnostics: when the app encounters an error or crashes, we receive a technical report (such as the error type, a stack trace, and basic device and app-version information) to help us fix it. This is configured to exclude personal identifiers and sleep data — console logs are dropped because they could incidentally contain sleep values, and no session recording or performance tracing is collected.
• If you email us for support, we receive your message and contact details.

4. Your sleep & health data — how it works

Sleep and health information is "special category" data under Article 9 of the GDPR and deserves the strongest protection. Roost is built around a two-layer model:

Layer 1 — Stays on your phone, always

The detailed, sample-level recordings Roost reads from Apple Health (HealthKit) or Android Health Connect — minute-by-minute sleep stages, heart-rate series, and similar raw streams — are read on your device, used for on-device calculations, and never transmitted to our servers. We also never place this data in iCloud. To grant Roost read access to this data, you approve it through your operating system's own health-permission screen, which you can revoke at any time in your device settings.

Layer 2 — Your progress syncs (encrypted, EU servers)

From the raw data, your device computes gameplay results — quality bands, Sleep Points, ranks, streaks, and your hidden baseline. The results (not the underlying samples) are stored on our servers so your progress survives a lost or replaced phone and powers your roost. Because a long-running record of sleep quality can itself reveal information about your health, we treat this entire server-side sleep layer as Article 9 health data and protect it accordingly.

Layer 2 (optional) — Nightly summary backup

Separately and optionally, you can opt in to summary sync. When enabled, about a dozen numeric figures per night (bedtime, wake time, duration, latency, efficiency, time awake, REM/deep percentages, heart-rate dip) are backed up to our servers so your detailed history can be restored on a new device. This is:

• Off by default and requires a separate, affirmative opt-in — it is never bundled with anything else.
• Withdrawable at any time in Settings. When you turn it off, we delete those numeric summaries from our servers.

5. How and why we use your data

6. Legal bases for processing (GDPR)

• Performance of a contract (Art. 6(1)(b)) — to provide the app, your account, and the social and subscription features you ask for.
• Consent (Art. 6(1)(a)) and explicit consent for health data (Art. 9(2)(a)) — for processing your sleep/health data, for summary sync, and for push notifications. You may withdraw consent at any time without affecting prior processing.
• Legitimate interests (Art. 6(1)(f)) — to keep the Service secure, prevent fraud and cheating, and understand product usage through privacy-protective behavioral analytics. We balance these interests against your rights and you can object (see Section 11).
• Legal obligation (Art. 6(1)(c)) — to keep records required by law, such as tax and transaction records.

7. Sharing & sub-processors

We do not sell your personal data, and we do not use it for third-party advertising. We share data only with service providers ("sub-processors") who process it on our behalf under contract, and only as needed to run the Service:

We may also disclose data if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or the public. If TC Fusion is involved in a merger, acquisition, or asset sale, personal data may be transferred, and we will notify you and honor the commitments in this policy.

8. What other people can see

Roost is social by design, but tightly scoped. Other members of your roost can see your display name, profile photo, current rank and Sleep Points, and time-related context needed for the weekly race. They cannot see your email, your raw or numeric sleep data, your baseline, or your individual night details. Profile photos are stored so they can be displayed in the app; treat your display name and photo as information visible to people you share a roost with.

9. International data transfers

Your core account and sleep data is stored in the European Union. Some sub-processors listed above are based in the United States. Where personal data of EU/UK users is transferred outside the EEA or UK, we rely on appropriate safeguards under the GDPR — such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or an adequacy decision where one applies. You can request a copy of the relevant safeguards by contacting us.

10. How long we keep your data

• We keep your account and associated data for as long as your account is active.
• When you delete your account, we permanently erase your personal data from our systems as described in Section 11, except where we must retain limited records to meet legal obligations (e.g., transaction records) or resolve disputes.
• Behavioral analytics events are retained according to our analytics provider's retention settings and then deleted or aggregated.
• If you withdraw summary-sync consent, the numeric summaries are deleted from our servers promptly.
• Raw health data is never stored on our servers, so there is nothing for us to retain — it lives only on your device for as long as your operating system keeps it.

11. Your privacy rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten");
• Restrict or object to certain processing;
• Data portability — receive your data in a portable format;
• Withdraw consent at any time, including for health-data processing and summary sync; and
• Lodge a complaint with a supervisory authority (see Section 16).

To exercise any right, email privacy@tcfusion.dev. We respond within the timeframes required by law (generally within one month under the GDPR). We will not charge a fee or discriminate against you for exercising your rights. We may need to verify your identity before acting on a request.

12. Children

Roost is intended for users aged 16 and older. It is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child under 16 has provided us personal data, contact us and we will delete it.

13. How we protect your data

We use industry-standard measures to protect your data, including encryption in transit and at rest, strict database access controls that limit your data to you (and, for the narrow social fields above, your roost), an architecture that keeps raw health data off our servers entirely, and analytics and crash-reporting pipelines designed so sleep values are never sent to third parties. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

14. Automated decision-making

Roost computes ranks, Sleep Points, and quest progress automatically. These power the game and do not produce legal or similarly significant effects about you, and we do not use your data for automated decisions of that kind, nor for profiling for advertising.

15. Changes to this policy

We may update this policy as the Service evolves. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app. Continued use of the Service after an update means you accept the revised policy.

16. Contact & complaints

Questions, requests, or concerns? Email privacy@tcfusion.dev or write to TC Fusion LLC, 5678 Davis Ford Rd, Manassas, VA 20112, USA.

If you are in the EU or UK and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection authority. In the EU, you can find yours via the European Data Protection Board; in the UK, the Information Commissioner's Office (ICO). We would, however, appreciate the chance to address your concern first.